Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/ea8f3a6c-8246-3a3a-a2db-49191db88c21.roa
File:                     ea8f3a6c-8246-3a3a-a2db-49191db88c21.roa (raw, json)
Hash identifier:          e9l9EPAeVvQcUvhIawvhIWrYEtRgZsher2K3K/gZmyU=
Subject key identifier:   B6:62:A7:84:BB:DE:EE:2C:5B:62:D5:9C:06:6C:B5:55:F9:BF:E4:FB
Certificate issuer:       /CN=d426c818-fe62-465f-8184-d4f8176e2692
Certificate serial:       010D0C9F432858451050291985C5827F3FB36420
Authority key identifier: F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/ea8f3a6c-8246-3a3a-a2db-49191db88c21.roa
Signing time:             Fri 01 Mar 2024 14:00:30 +0000
ROA not before:           Fri 01 Mar 2024 14:00:30 +0000
ROA not after:            Thu 30 May 2024 13:00:30 +0000
asID:                     6507
IP address blocks:        151.106.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:50:29:19:85:c5:82:7f:3f:b3:64:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d426c818-fe62-465f-8184-d4f8176e2692
        Validity
            Not Before: Mar  1 14:00:30 2024 GMT
            Not After : May 30 13:00:30 2024 GMT
        Subject: CN=54c0dc4d-6479-44c6-b142-b26d86a44d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4a:34:a0:98:85:4a:8e:26:ab:fa:47:d6:14:
                    2d:32:a3:d1:2c:50:4b:12:c2:db:24:08:b7:27:c6:
                    2e:30:52:0f:1d:ec:84:f3:c0:8e:04:0c:2c:f3:99:
                    7b:8e:df:b2:f0:99:b8:b2:11:47:f9:d3:1b:85:4c:
                    c0:a7:86:eb:6e:9d:18:4c:d8:cc:75:2e:35:d5:92:
                    db:45:b4:44:4e:ed:4a:62:28:74:95:4e:62:eb:e6:
                    e1:64:01:04:3e:ab:c9:93:4e:3e:25:06:af:45:1f:
                    86:67:72:b9:a4:ba:c8:9b:20:d1:74:40:56:dc:43:
                    c5:63:89:ce:10:bb:77:8f:44:a6:c7:c5:1a:ed:2c:
                    75:dc:f9:33:73:a9:d6:14:e4:f1:1c:53:7b:ee:6b:
                    d8:cf:7e:d7:f9:7a:7f:e0:23:fd:2a:71:2a:29:46:
                    ec:dc:c9:3b:a6:40:df:f6:3d:61:8e:ab:c3:bc:77:
                    50:2e:3a:74:53:7f:2a:d3:d1:10:80:5f:fd:e2:bc:
                    8d:ff:fb:9c:fe:4b:f5:ca:59:79:6c:e9:6d:fe:e8:
                    c0:30:22:d7:fa:4b:8b:de:d9:44:11:a4:eb:d7:65:
                    90:48:fd:6f:39:68:fa:d9:a3:c1:59:9d:04:f8:8b:
                    eb:43:f7:53:e1:b7:8e:9d:c4:c7:d3:fe:50:c3:eb:
                    2c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:62:A7:84:BB:DE:EE:2C:5B:62:D5:9C:06:6C:B5:55:F9:BF:E4:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/ea8f3a6c-8246-3a3a-a2db-49191db88c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl

            X509v3 Authority Key Identifier:
                keyid:F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.106.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:b5:20:3f:d1:10:bf:23:8a:6d:99:c9:5b:84:76:31:75:e2:
         75:b6:92:6b:bf:2a:8d:f1:0a:18:d7:ba:e2:39:a1:0f:00:75:
         bd:1c:15:6c:23:09:ec:cc:b8:dd:e8:e9:15:46:89:25:80:d5:
         21:b2:b0:d3:0e:6a:4e:6a:6e:0a:68:42:b9:c4:74:8a:ea:e3:
         c4:47:98:52:ff:6a:6b:d2:09:89:b4:5c:6a:db:20:7f:ca:b0:
         da:b5:20:a4:b0:0a:29:ef:cb:0f:9a:6f:08:96:f5:6e:2f:63:
         54:f0:cd:a5:b7:e5:e4:80:1d:48:c0:e7:09:c8:c0:94:f5:ea:
         1c:a0:59:e1:aa:4a:e4:76:54:13:11:1b:a8:7e:c5:b8:4d:d7:
         bc:a8:c3:93:d4:08:32:d6:d2:b2:9f:eb:95:a7:11:b0:09:71:
         be:b2:6c:b0:97:1c:42:7d:e6:05:83:bc:36:35:e1:09:d4:85:
         35:fc:64:24:71:d1:99:7e:4b:07:89:a5:40:d4:ef:33:4b:59:
         cd:67:bd:1a:c2:02:85:c3:2c:c8:2f:c4:0d:f0:04:66:7b:d1:
         3c:73:2a:38:30:7c:4a:21:63:09:9d:a0:54:70:c4:a2:90:8a:
         aa:9f:a5:55:c6:69:ef:f6:83:08:d3:8a:e7:14:97:0d:71:0c:
         3d:17:92:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:39:20 2024 by rpki-client on console-fra.rpki-client.org